BG-TEK Coslat Hotspot 安全漏洞

BG-TEK Coslat Hotspot is a wireless hotspot product from BG-TEK, Inc. It is used to provide wireless LAN access to Internet services. A security vulnerability exists in versions prior to BG-TEK Coslat Hotspot 6.26.0.R.20250227, which stems from improperly restricted authentication attempts and...

PT-2025-12337

Name of the Vulnerable Software and Affected Versions BG-TEK Coslat Hotspot versions prior to 6.26.0.R.20250227 Description The issue is related to an improper restriction of excessive authentication attempts, allowing password brute forcing and authentication abuse. Recommendations For versions...

Linux Distros Unpatched Vulnerability : CVE-2024-27322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling ...

CVE-2025-25953

Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information...

PT-2025-9588

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to an Azure JWT access token exposure, allowing authenticated attackers to escalate privileges and access sensitive...

PT-2025-9242

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to an Insecure Direct Object References IDOR in the component "/getStudemtAllDetailsById?studentId=XX". This allows...

TRENDnet TEW-929DRU 安全漏洞

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU version 1.0.0.10 suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the rname variable within the havesamename function on...

CVE-2024-13481

The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-13481

The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-13481

CVE-2024-13481 – LTL Freight Quotes – R+L Carriers Edition (WordPress) Affected software: LTL Freight Quotes – R+L Carriers Edition plugin for WordPress, all versions up to and including 3.3.4. Root cause: SQL Injection via the edit_id and dropship_edit_id parameters caused by insufficient escapi...

WordPress LTL Freight Quotes – R+L Carriers Edition plugin <= 3.3.4 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – R+L Carriers Edition versions = 3.3.4...

Security Bulletin: R statistical programming language - deserialization of untrusted leading to arbitrary code execution

Summary Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS R Data Serialization formatted file or R package to run arbitrary code on an end user's system when...

Azure Linux 3.0 Security Update: R (CVE-2024-27322)

The version of R installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27322 advisory. - Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at...

CVE-2021-22275

Buffer Overflow vulnerability in B Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service...

CVE-2022-3385

Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can remotely overflow the stack buffer and enable remote code execution...

CVE-2022-3386

Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker can use an outsized filename to overflow the stack buffer and enable remote code execution...

CVE-2022-40265

Improper Input Validation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series RJ71EN71 Firmware version "65" and prior and Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Network Part Firmware version "65" and prior allows a remote unauthenticated attacker...

CVE-2019-19100

A privilege escalation vulnerability in the upgrade service in B Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.4SP, . 4.6.3SP, 4.7.2 and 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface...

CVE-2019-19108

An authentication weakness in the SNMP service in B Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B products via SNMP...

CVE-2024-2637

An Uncontrolled Search Path Element vulnerability in B Industrial Automation Scene Viewer, B Industrial Automation Automation Runtime, B Industrial Automation mapp Vision, B Industrial Automation mapp View, B Industrial Automation mapp Cockpit, B Industrial Automation mapp Safety, B Industrial...